Praveensai Kundeti

SOC Analyst

Concentrix

02.2022 - Current

Monitored, investigated, and triaged real-time security alerts using IBM QRadar and Cortex XDR across endpoints, networks, and cloud platforms.
Conducted log correlation and deep packet inspection to identify anomalies and indicators of compromise (IOCs).
Responded to security incidents including malware outbreaks, data exfiltration attempts, insider threats, and brute-force login attacks.
Performed phishing email analysis and worked with Proofpoint to block malicious domains and IPs.
Isolated affected endpoints using Cortex XDR and coordinated with IT for containment and recovery.
Regularly reviewed and fine-tuned detection rules to reduce false positives and improve alert accuracy.
Investigated Azure Active Directory sign-in anomalies and performed user access reviews.
Created incident response reports including root cause analysis and post-incident actions.
Collaborated with the vulnerability management team to track, prioritize, and remediate critical vulnerabilities.
Participated in weekly threat hunting exercises based on MITRE ATT&CK techniques.
Provided input for SOC runbooks, playbooks, and process documentation.
Maintained compliance with ISO 27001 and NIST security standards during incident response and reporting.
Delivered awareness sessions to internal teams on phishing prevention and security best practices.
Supported red team-blue team exercises to improve SOC readiness and detection capabilities.
Liaised with third-party threat intelligence providers to stay up to date on emerging threats and campaigns.